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Abstract — This paper describes the security of E-passport with 
elliptic curves. The chip which is having the information about 
the passenger should occupy very less area & The chip 
information cannot be traceable. AS Compared to other public 
key cryptosystems such as AES and DES elliptic curve 
cryptography provides greater authentication and verification 
security. Contactless smart cards work only with ECC because 
other systems require too much induction energy. The physical 
implementations such as power consumptions should not allow 
the hacker to think about the private key information. Hence in 
FPGA technology WDDL logic can be used to prevent the 
hackers even though it consumes more power. 
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I. 



Introduction 



An electronic passport should securely store biographical 
information and digital image that are identical to the 
information that is visually displayed in the passport. 
Contactless chip technology allows the information stored in an 
Electronic Passport to be read by special chip readers at a close 
distance; and digital signature technology is used to verify the 
authenticity of the data stored on the chip. This technology is 
commonly used in credit cards and other secure documents 
using integrated circuits or chips. The Electronic Passport 
facilitates traveler by allowing greater border protection and 
security. The information stored on the chip must be prevented 
from being altered. For this public key infra structure is used. 
The e-passport and the use of the PKI digital signature stands to 
benefit the legitimate traveler. For providing Security& 
Authentication one of the public key cryptosystem (i.e) elliptic 
curve cryptography can be used because of its security in lesser 
no of bits. Efficient finite field multiplication is crucial for 
implementing public key Cryptosystem. Elliptic curve 
cryptography (ECC) has been widely adopted in modern 
security standards to provide robustness for secure data 
transaction such as personal identity verification (PIV), data 
and finance authentication, digital signature, and security key 
management, etc. With the unified architecture for both prime 
field and binary field cryptosystems, Information related with 
the physical implementation of the device, such as time delay 
and power consumption, has been used repeatedly to find the 
secret key in so-called Side Channel Attacks. 

A. Attacks 

1 ) Wireless E passports introduces two new security risks: 
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a) Active scanning attacks 

An attacker communicates with the passport without the 
owner's consent, by bringing a reader in close proximity to the 
passport, e.g. when the passport is in a coat pocket or a 
handbag. 

b) Passive eavesdropping attack 

An attacker eavesdrops on the communication when the 
passport communicates with a legitimate reader with the 
owner's consent, for instance at passport control at an airport. 
The resulting lookup table from government allows an attacker 
to determine where a chip is from. 

2) Using RFID tags 

The Basic Access Control protocol ensures that the data on 
the e-passport can only be read by someone who knows the key 
derived from the date of birth, date of expiry and number on the 
passport. Our attack lets someone who does not know this key 
trace a passport, i.e., if an attacker can observe a run of a 
particular passport then they can build a device that detects 
whenever the same passport comes into range of the reader. 
RFID tags receive their power via a signal from the reader; 
FCC regulations [FCC] limit the power of the readers, leading 
to an effective range of about 9cm. 

3) Threat to hack Digital Signature Algorithms 

For messages sent through a non-secure channel, a properly 
implemented digital signature gives the receiver reason to 
believe the message was sent by the claimed sender. Digital 
signatures are equivalent to traditional handwritten signatures 
in many respects, but properly implemented digital signatures 
are more difficult to forge than the handwritten type. With Try 
and Implement Algorithm the hacker may find the number. 

B. Elliptic curves 

An elliptic curve is a plane curve which consists of the 
points satisfying the equation. 



y2 = x3 + ax + b 



(1) 



The constants values a& b must satisfy the condition 
4a3+27b2 / together with a point at infinity. The addition 
of two points of this curve can be defined to form a group. 

In binomial Galois filed operation is defined as Polynomial: 
(x6 + x4 + x + l)+(x7 + x6 + x3 + x) = x7 + x4 + x3 + 1 

Binary:{01010011}+{ 11001010} = {10011001} 
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Hexadecimal: {53} + {CA} = {99} 

Elliptic curves are interesting for cryptography is that the 
discrete logarithm problem in that group is believed to be 
computationally hard. This means that elliptic -curve-based 
protocols can use shorter keys and more efficient arithmetic 
than protocol based on other groups such as nonzero integers 
modulo a prime number. 



P (-2.35, -1.86) 
Q (-0.1, 0.836) 
-5(3.89,5.62) 
5(3.89,-5.62) 




P + Q = R= (3.89,-5.62). 



y 1 - =x^ - Ix 



Figure 1 . ECC Addition 

C. WDDL 

Wave dynamic differential logic combined with differential 
routing is a working, practical technique to thwart side-channel 
power attacks. Measurement-based experimental results show 
that a differential power analysis attack on a prototype IC, 
fabricated in 0.1 8um CMOS, does not disclose the entire secret 
key of the ECC algorithm at measurement acquisitions. This 
makes the attack infeasible. The required number of 
measurements is larger than the lifetime of the secret key in 
most practical systems. 

Side-channel power attacks can be mounted on ASICs, 
FPGAs, DSPs and microprocessors because in standard CMOS 
technology, power is only drawn from the power supply when 
a to 1 output transition occurs. Therefore, by measuring the 
power supply current during the encryption, and then 
performing statistical analysis of the measured power traces, 
the secret key can readily be determined. The secure digital 
design flow pursues constant power dissipation by balancing 
the power consumption of the logic gate. When the power 
dissipation of the smallest building block is constant and 
independent of the signal activity, no information is leaked 
through the power supply. As a result, it protects against all 
power attacks including simple power analyses, differential 
power analyses and higher order power analyses. 

II. The Encoding problem-Relevant work 

Binary finite fields (Galois Field (2 m )) provide efficient 
algorithms and implementations of the arithmetic operations. 
For example, additions and subtractions in GF(2 m ) are very fast 



because they can be implemented as simple XOR operations 
without carry propagation. This renders these fields very 
favorable for cryptographic applications with long key lengths. 
Several elliptic curves that are for example recommended for 
ECC by the National Institute of Standards and Technology use 
these binary fields. 

The calculation of points on elliptic curve over finite fields 
is described in [2]. The methods to construct points on an 
elliptic curve were explained in [3] & [4]. These results have 
prompted further research in this area as well as various 
cryptographic applications. For this purpose, they proposed a 
very natural way to encode values to that curve. However, this 
works only for curves of a special form (super singular curves), 
which aren't suitable for most applications owing to security 
properties. 

III. Password- Authenticated Communication 
Establishment 

The International Civil Aviation Organization (ICAO) 
maintains a series of specifications pertaining to secure 
communication between the chips on Machine-Readable Travel 
Documents (MRTDs) and MRTD readers. PACE(Password 
Authenticated Communication Establishment) aims to establish 
a secure communication channel between a chip and terminal 
sharing a password p. For e-passports, this password is 
obtained from the MRTD's machine -readable zone. PACE has 
six steps; card issuing phase, Authentication phase, Key 
distribution phase. After these three steps, the two parties have 
obtained a common high- entropy secret: point Z on the elliptic 
curve. The next three steps are key derivation, key 
confirmation, and session establishment, which are relatively 
standard and don't involve point encodings. 

IV. Implementations 

In ECC scalar multiplication is the time consuming 
method of Finite point multiplication in affine Coordinates. 
This method uses the simple algorithm. 

Input: P = (x, y) x, y e GF(2 m ) and 

k = (k m _!, k m _ 2 , ko) 

Output: R = kP 

R^(0,0) 

S<-P 

for i from to m - 1 

if k; = 1 R <- ECC-ADD(R, S) 

end if 

S ^ECC-Double(S) 
End for 

Using affine representation of elliptic curve points, the 
ECC- ADD operation of two points is defined as Input P = (x,, 
yi), Q = (x 2 , y 2 ) Output R = (x 3 , y 3 ) 

X3 *~ fa + i. + Xj + X2 + a 

y 3 ^l(x 1 +x 3 )+x 3 +y I 
^*-(y2+yi)/(x2 + X!) 
The ECC -DOUBLE operation 
Input P = (x b y { ), Output R = (x 3 , y 3 ) 



IJTEL II ISSN:2319-2135 



173 II www.ijtel.org 



International Journal of Technological Exploration and Learning (IJTEL) 
Volume 2 Issue 4 (August 2014) 




K P 

Figure 2. Architecture for ECC-ADD& ECC-DOUBLE 

The algorithm used here allows flexible changes in ECC. 
The multiplier, divider and squarer modules can be updated just 
by replacing them by better performed modules. The chip 
technology for producing IC in E Passport can be implemented 
using WDDL logic. 
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Figure 3. WDDL-Precharge wave generation. 

Or by using any of the algorithms ECC processor can be 
constructed. The results are analyzed for this module in Xilinx 

as: 




TABLE I. 



Area/timing results 



iviuitipiier 

Area 


Area 


Cycles/ 
kP 


Clk period 

(ns) 


lime 

kP(ms) 


Serial 


5632 (52%) 


72527 


19.409 


1.36 


D = 4 


6762 (62%) 


52620 


21.611 


1.06 


D = 8 


7342 (68%) 


49360 


20.747 


1.02 


D= 16 


8537 (79%) 


47730 


22.286 


1.13 


D = 32 


10750 (99%) 


46915 


29.040 


1.4 



The individual modules compilation report taken using 
Quartus II with processor EP2C20F484C7. 



TABLE II. 



Logic results 



Modules 


Logic Elements 


Logic Registers 


Squarer 


165 





Divider 


218 


132 


multiplier 


92 


33 



Area resources for difleronl pomkllism 'jivi- 1: in binary field multiplication 




150 200 250 300 350 400 450 500 550 
m (field order) 



Figure 4. Area recourses for ECC multiplication for different field order. 

V. Conclusions 

ECC provides better security compared to other pubic key 
cryptosystems mathematically. The chip designs inside the E- 
passport may be more resistive to prevent side channel attacks. 
A digit serial multiplier, division algorithm & combinatorial 
squaring units are used for ECC. The better modules compared 
to this may be used. The major contribution of this paper is a 
novel method to combine WDDL logic and ECC based public 
key cryptosystems to produce better e-pass port security 
systems. 
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